@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +6 more potentially affected by CVE-2024-21548 via bun (>=1.0.2, <=1.1.29)

bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =0.0.2, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2024-21548 Source advisory: OSV:GHSA-V9MX-4PQQ-H232...

The vulnerability of the loader for AMD Platform Security Processor processors allows a hacker to execute arbitrary code.

The vulnerability of the loader for AMD Platform Security Processor processors involves incorrect checking of the range in the object header. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of AMD’s microprogrammed software for processors lies in the violation of data protection mechanisms, allowing attackers to circumvent the SPI ROM protection mechanism.

The vulnerability of AMD’s microprogrammed software lies in the bypass of the data protection mechanism. Exploiting this vulnerability allows an attacker to circumvent the SPI ROM protection mechanism by modifying the data...

Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

This Week in Spring - December 17th, 2024

This Week in Spring - December 17th, 2024 Hi, Spring fans! Welcome to another installment of a Bootiful Podcast! It's the 17th of December, 2024! And you know what means? The end of the year is nearly upon us! I can't believe it. It's been a very long year indeed, but I'm happy to get on board a...

PT-2025-12812 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A local attacker could bypass existing security and execute arbitrary code on affected installations by exploiting a vulnerability in the Trend Micro Apex One Security Agent...

PT-2025-12813 · Trend Micro · Trend Micro Apex One Security Agent Plug-In User Interface Manager

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One Security Agent Plug-in User Interface Manager affected versions not specified Description: A local attacker could bypass existing security and execute arbitrary code on affected installations. The attacker must first obta...

wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function `block_type_get_result_types.

...

drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported

...

PT-2025-25761

Name of the Vulnerable Software and Affected Versions Trend Micro Security version 17.8 Consumer Description The issue is a link following local privilege escalation vulnerability. It could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own...

PT-2025-25240

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One security agent affected versions not specified Description An uncontrolled search path issue allows a local attacker to escalate privileges on affected installations, but the attacker must first obtain the ability to execu...

The vulnerability of components related to DRM/AMDKFD in Linux kernel allows attackers to increase their privileges within the system.

The vulnerability of DRM/AMDKFD components in Linux kernel relates to memory management errors that occur after memory is freed in the svmrangevramnodefree function. Exploiting this vulnerability can allow attackers to enhance their privileges...

SUSE: Security Advisory (SUSE-SU-2024:4116-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:4078-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/display cores in the Linux operating system is related to the assignment of the NULL pointer in the amdgpudminit function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

Vulnerability of components such as DRM, AMDGPU, and system kernel firewalls in Linux operating systems, which can be exploited by attackers to cause service failures.

The vulnerability of components such as DRM, AMDGPU, and the operating system kernel’s Fence function in Linux is related to the assignment of the NULL pointer in the amdgpufencedriverswfini function. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Trend Micro Antivirus One antivirus protection tool for MacOS systems lies in insufficient validation of input data, allowing attackers to bypass the virus scanning process.

The vulnerability of the Trend Micro Antivirus One antivirus protection software for MacOS systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the virus scanning process...

Guess Who’s Back - The Return of ANEL in the Recent Earth Kasha Spear-phishing Campaign in 2024

Trend Micro has identified a spear-phishing campaign active in Japan since June 2024. Evidence about the malware used by this campaign suggests this was part of a new operation by Earth Kasha...

Trend Micro Apex One Multiple Vulnerabilities (KA-0016669)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12980 and Agent Build 12980. It is, therefore, affected by multiple vulnerabilities, including the following: - An origin validation vulnerability in the...